Redhat Posted November 1, 2004 Report Share Posted November 1, 2004 http://www.theregister.co.uk/2004/11/01/gmail_bug_fixed/Google has fixed a flaw in its high-profile webmail service, Gmail, which created a possible route for hackers to gain full access hackers full access to a user's email account simply by knowing their user name. Using a hex-encoded XSS link, the victim’s cookie file could have been stolen by a hacker, who might later use it to identify himself to Gmail as the original owner of an email account regardless of whether or not the password is subsequently changed.It's unclear whether the hole, first reported by Israeli news site Nana last week, has been maliciously exploited. In any case the issue has now been resolved.In a brief statement released on Saturday (30 October), Google said it "was recently alerted to a potential security vulnerability affecting the Gmail service. We have since fixed this vulnerability, and all current and future Gmail users are protected". Quote Link to comment Share on other sites More sharing options...
Chris Posted November 1, 2004 Report Share Posted November 1, 2004 That was quick http://www.windowsforum.org/forum/index.php?showtopic=14053 Quote Link to comment Share on other sites More sharing options...
andsome Posted November 1, 2004 Report Share Posted November 1, 2004 Too many negative reports. I'm sticking with OE Quote Link to comment Share on other sites More sharing options...
Sir T Fireball Posted November 4, 2004 Report Share Posted November 4, 2004 I wonder if this 'fix' is in any way responsible for my not being able to access my gmail account anymore? Quote Link to comment Share on other sites More sharing options...
Redhat Posted November 4, 2004 Author Report Share Posted November 4, 2004 I wonder if this 'fix' is in any way responsible for my not being able to access my gmail account anymore?Can access mine fine here, how do you mean you cannot access it? Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.